1. Introduction
Bookendry respects your privacy and recognises the importance of handling personal information responsibly. This Privacy Policy explains how personal data is collected, used, stored, shared and retained when you visit www.bookendry.com, place an order, contact our customer service team or otherwise interact with our website.
Bookendry is a brand operated by FORTH OFFICE SUPPLIES LIMITED. We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, applicable UK privacy and electronic communications rules, and the EU General Data Protection Regulation (EU GDPR) where applicable.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required by law, we will request it separately. Visiting our website does not, by itself, constitute consent to optional cookies or direct marketing.
2. Data Controller
The company responsible for determining the purposes and means of processing personal data collected through the Bookendry website is:
Brand Name: Bookendry
Legal Company Name: FORTH OFFICE SUPPLIES LIMITED
Company Registration Number: SC433335
Registered Address: 42-48 Mitchell St, Kirkcaldy KY1 1BD, United Kingdom
Email: desk@bookendry.com
Telephone: +44 1592591999
Website: www.bookendry.com
For privacy enquiries, requests relating to personal data or questions concerning this Policy, please contact us using the details above.
3. Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal data:
3.1 Information You Provide
- Name and contact details, including email address and telephone number.
- Billing and delivery addresses.
- Order details, purchased items, order references and transaction history.
- Information included in messages, enquiries, return requests and customer service communications.
- Account registration details, where an account is created.
3.2 Payment and Transaction Information
When you place an order, information relating to the transaction may include the order amount, currency, payment status, transaction reference, billing details and selected payment method.
Payments are processed through Stripe. Depending on the payment method and checkout arrangement, Stripe may collect and process payment instrument details and other information required to facilitate the transaction.
We do not intend to collect full payment card details directly through ordinary customer service correspondence. Please do not send complete card numbers, card security codes or account passwords to us by email.
3.3 Website and Device Information
When you access our website, certain information may be collected automatically, depending on your browser settings and the tools enabled on the website. This may include:
- IP address and approximate location derived from it.
- Browser type, operating system and device information.
- Pages visited, referring pages and interaction records.
- Website access dates and times.
- Cookie identifiers and related online activity information, where applicable.
Non-essential tracking technologies will be used only where the required consent has been obtained.
4. Purposes and Lawful Bases of Processing
We process personal data only for specified purposes and where an appropriate lawful basis applies.
| Purpose | Lawful basis |
|---|---|
| Processing orders and arranging fulfilment | Performance of a contract |
| Collecting payments and administering refunds | Performance of a contract and compliance with applicable legal obligations |
| Responding to enquiries and providing customer support | Legitimate interests or steps taken at your request before entering into a contract |
| Maintaining accounting and transaction records | Compliance with legal obligations |
| Maintaining website accounts and related functions | Performance of a contract |
| Maintaining website functionality and diagnosing operational issues | Legitimate interests, subject to applicable legal requirements |
| Detecting suspicious transactions and handling payment-related concerns | Legitimate interests and, where applicable, legal obligations |
| Sending optional promotional communications | Consent or another lawful basis where permitted by applicable law |
| Using non-essential cookies and similar tracking tools | Consent where required by applicable law |
Our legitimate interests may include administering our business, maintaining transaction records, responding to customer enquiries and protecting the integrity of our ordering processes. We consider the rights and interests of individuals when relying on this basis.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
5. Payment Processing by Stripe
Bookendry uses Stripe as its payment processor to facilitate payments for purchases made through our website.
When you proceed to checkout, Stripe may receive information such as your name, email address, billing address, transaction amount, order reference, payment method information and other details required for the selected payment method.
Stripe processes relevant information to facilitate payments, communicate transaction results, administer refunds and support payment-related checks. Depending on the circumstances, Stripe may act as a data processor on our behalf or as an independent data controller for processing activities for which Stripe determines the purposes and means.
Stripe’s own privacy practices apply to the personal data it processes in its capacity as an independent controller. For further information, please consult the Stripe Privacy Centre and Stripe Privacy Policy.
We receive relevant transaction information to administer your order, maintain business records and respond to payment enquiries. The information available to us depends on the payment method and checkout arrangement.
6. Disclosure of Personal Data
We may disclose relevant personal data to the following categories of recipients where necessary and lawful:
- Stripe: To process payments and manage transaction-related activities.
- Delivery and fulfilment providers: To arrange delivery and provide relevant shipment updates.
- Website hosting and service providers: To operate, maintain and support the website and related business systems.
- Customer communication providers: To manage enquiries and send necessary order communications.
- Professional advisers: Such as accountants, auditors and legal advisers, where required for legitimate business purposes.
- Public authorities and regulatory bodies: Where disclosure is required by law or is necessary to establish, exercise or defend legal claims.
We disclose only information reasonably required for the relevant purpose. Where a service provider processes personal data on our behalf, we take appropriate steps to establish the necessary contractual and organisational arrangements.
We do not sell personal data to third parties.
7. International Data Transfers
Some service providers involved in website operations and payment processing may process personal data outside the United Kingdom or the European Economic Area.
Where a restricted international transfer takes place, we will use an applicable lawful transfer mechanism, such as an adequacy regulation or decision, an approved standard contractual clause or the UK International Data Transfer Agreement or Addendum, as appropriate. Additional measures will be considered where required by applicable law.
Information about relevant transfer arrangements may be requested by contacting desk@bookendry.com.
8. Data Retention Periods
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including the fulfilment of orders, legal compliance, accounting, customer service and the establishment or defence of legal claims.
Our standard retention periods are as follows:
| Data category | Standard retention period |
|---|---|
| Order, invoice and accounting records | Generally six years after the end of the relevant financial year, where appropriate for UK company and tax record requirements |
| Customer account information | While the account remains active and, after closure, only for as long as necessary for relevant operational or legal purposes |
| Customer service enquiries and correspondence | Generally up to 24 months after the enquiry is closed, unless a longer period is necessary |
| Return, refund and complaint records | Generally up to six years after resolution where required for accounting, contractual or legal purposes |
| Website logs and diagnostic records | Generally up to 12 months, unless a longer period is justified by a specific operational or legal need |
| Non-essential cookie data | For the period stated in the relevant cookie information or consent settings, subject to applicable requirements |
| Promotional communication preferences | Until consent is withdrawn or an objection is received, with a limited suppression record retained where necessary to respect that preference |
These periods are applied according to the nature of the records and the purposes for which they are held. Where a statutory requirement, legal claim, regulatory request or documented business need justifies a different period, the relevant information may be retained for the necessary additional period.
When personal data is no longer required, we will take appropriate steps to delete it or anonymise it, subject to applicable legal obligations and legitimate record-retention requirements.
The retention of transaction information by Stripe is governed by Stripe’s own legal and operational requirements and applicable agreements. Its retention period may differ from ours.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential website functions, remember preferences, understand website usage and provide relevant services.
Cookies may include:
- Essential cookies: Required for functions such as maintaining a shopping basket, managing a checkout session or remembering relevant website settings.
- Preference cookies: Used to remember choices you make on the website.
- Analytics cookies: Used to understand how visitors interact with our website, where enabled.
- Payment-related cookies: Used by Stripe or associated payment components where necessary for payment processing and related functions.
Non-essential cookies and similar technologies will be activated only after obtaining consent where required by applicable law. You may change or withdraw your cookie preferences through the available cookie settings. You may also manage cookies through your browser, although disabling certain cookies may affect website functions.
Some cookies may be set by Stripe during checkout. Their purpose, duration and processing arrangements depend on the payment services used.
Further information about the cookies actually used on our website should be provided in a separate Cookie Policy or cookie preference interface.
10. Data Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure.
These measures are selected according to the nature of the information, the purposes of processing and the risks involved. Access to personal data is limited to persons and service providers who require it for relevant business activities.
Where a personal data breach occurs, we will assess the circumstances and take the steps required by applicable data protection law, including notifying the relevant supervisory authority or affected individuals where legally required.
11. Your Data Protection Rights
Subject to applicable law and any relevant exemptions, you may have the right to:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete personal data.
- Request erasure of personal data where the legal conditions are met.
- Request restriction of processing in specified circumstances.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Request a copy of certain personal data in a portable format where the legal requirements are met.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with the relevant data protection supervisory authority.
These rights are not absolute in every circumstance. We may retain information where required by law or where another lawful ground permits continued processing.
To exercise a right, contact desk@bookendry.com. We may request information reasonably necessary to verify your identity and locate the relevant records. We will respond within the period required by applicable law.
If you are located in the European Economic Area, you may contact the data protection authority responsible for your country or place of residence.
12. Direct Marketing
We may send promotional emails where we have a lawful basis to do so and have met applicable consent and electronic communications requirements.
You may unsubscribe using the link included in a promotional email or by contacting desk@bookendry.com.
If you opt out, we may retain a limited record of your preference to ensure that further promotional communications are not sent where they should not be. Transactional messages necessary to administer an order or respond to a request may still be sent.
13. Children’s Privacy
Our website is intended for general customers purchasing desktop stationery and office supplies. We do not knowingly seek to collect personal data from children in circumstances where parental authorisation or other legal requirements apply.
If you believe that a child has provided personal data inappropriately, please contact us so that we can assess the matter and take any action required by applicable law.
14. Third-Party Websites
Our website may contain links to external websites or services. Those websites operate under their own privacy policies and data-handling practices.
We encourage you to review the relevant privacy information before providing personal data to an external service. This Privacy Policy applies to the processing activities for which FORTH OFFICE SUPPLIES LIMITED is responsible.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, website functions or applicable legal requirements change.
The revised version will be published on this page with an updated revision date. Where required by law, we will provide additional notice or obtain consent before carrying out processing that requires it.
16. Contact Us
For questions about this Privacy Policy, requests concerning your personal data or other privacy-related matters, please contact:
Email: desk@bookendry.com
We will review privacy enquiries and respond in accordance with applicable legal requirements.